Minding the data: protecting learners’ privacy and security